Privacy Policy

Who we are

Preston & District Motorcycle Club (PDMCC) is a not-for-profit motorcycle racing club based in the North West of England. We operate the website at pdmcc.racing, including the Race School booking system and race calendar. PDMCC is the data controller for personal data collected through this site. For data queries, contact pdmcc.webmaster@gmail.com.

What we collect

When you book a Race School session, we collect:

• your forename and surname
• your email address
• your date of birth
• your phone number
• your ACU membership number
• the sessions you have selected

We do not receive or store your card details. Payment is handled entirely by SumUp on a hosted checkout page; we receive only a transaction reference and a confirmation that payment succeeded or failed. We do not collect medical or health information through this website — medical fitness declarations are handled by the ACU through their Sport80 licensing system.

If you accept analytics cookies, we also collect basic technical information about your visit (IP address, browser, pages visited) via PostHog. You can change this choice at any time on our Cookie Settings page.

Why we use it

We use your information to take and manage your booking, take payment, send booking confirmations and related emails, verify ACU licence status with the ACU where applicable, keep accounting records as required by HMRC, and maintain the security and reliability of the website. We do not currently send marketing emails. We do not sell your data and we do not share it for third-party marketing.

Who we share it with

We use a small number of service providers to run the site, each acting as a data processor under a contract with us:

• Neon — database hosting (EU, Dublin)
• Vercel — website hosting (UK, London)
• SumUp — payment processing (EU)
• Resend — sending transactional emails such as booking confirmations (US)
• PostHog — website analytics, only if you accept cookies (EU)

We also share limited information with the Auto-Cycle Union (ACU) where necessary to verify licence status for race participation. Where data is processed outside the UK, transfers are protected by the UK International Data Transfer Agreement or EU Standard Contractual Clauses with the UK Addendum.

Children

Riders under 18 are permitted to take part. Where the rider is under 18, a parent or guardian must sign a consent form before participation, and we rely on that parental consent for processing the child’s personal data.

How long we keep it

We keep booking and payment records for six years to meet HMRC requirements. Other categories of data are kept only as long as necessary; the full retention schedule will be set out in the forthcoming detailed notice. After these periods we delete or anonymise the data.

Your rights

Under UK GDPR you have the right to access the data we hold about you, ask us to correct or delete it, restrict or object to our use of it, receive a copy in a portable format, and withdraw consent where we rely on it. To exercise any of these rights, email pdmcc.webmaster@gmail.com. We will respond within one calendar month.

We do not carry out automated decision-making that produces legal or similarly significant effects on you.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we have a chance to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or 0303 123 1113.